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METHOD, SYSTEM, AND PRODUCT FOR BOOTING A PARTITION USING 
ONE OF MULTIPLE, DIFFERENT FIRMWARE IMAGES 

BACKGROUND OF THE INVENTION 

1. Technical Field: 

The present invention relates generally to the field 
of computer systems and, more specifically to computer 
systems having multiple, logical partitions. Still more 
particularly, the present invention relates to a 
logically partitioned computer system, method, and 
product for booting one of the partitions using one of 
multiple, different firmware images. 

2. Description of Related Art: 

A logical partitioning option (LPAR) within a data 
processing system (platform) allows multiple copies of a 
single operating system (OS) or multiple heterogeneous 
operating systems to be simultaneously run on a single 
data processing system hardware platform. A partition, 
within which an operating system image runs, is assigned 
a non-overlapping subset of the platform's hardware 
resources. These platform allocable resources include 
one or more architecturally distinct processors with 
their interrupt management area, regions of system 
memory, and input/output (I/O) adapter bus slots. The 
partition's resources are represented by its own open 
firmware device tree to the OS image. 

Each distinct OS or image of an OS running within 
the platform is protected from each other such that 
software errors on one logical partition can not affect 
the correct operation of any of the other partitions. 
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This is provided by allocating a disjoint set of platform 
resources to be directly managed by each OS image and by 
providing mechanisms for ensuring that the various images 
can not control any resources that have not been 
5 allocated to it. Furthermore, software errors in the 

control of an operating system' s allocated resources are 
prevented from affecting the resources of any other 
image. Thus, each image of the OS (or each different OS) 
directly controls a distinct set of allocable resources 

10 within the platform. 

Many logically partitioned systems make use of a 
hypervisor. A hypervisor is a layer of privileged 
software between the hardware and logical partitions that 
manages and enforces partition protection boundaries. 

15 The hypervisor is also referred to herein as partition 
management firmware or firmware. The hypervisor is 
responsible for configuring, servicing, and running 
multiple logical systems on the same physical hardware. 
The hypervisor is typically responsible for allocating 

20 resources to a partition, installing an operating system 
in a partition, starting and stopping the operating 
system in a partition, dumping main storage of a 
partition, communicating between partitions, and 
providing other functions. In order to implement these 

25 functions, the hypervisor also has to implement its own 
low level operations like main storage management, 
synchronization primitives, I/O facilities, heap 
management, and other functions. 

Currently, only a single firmware image can exist 

30 within a logically partitioned computer system. This 
firmware image is used to boot each partition. Each 
partition, thus, boots from the same image. When the 
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firmware image is modified, the entire boot process must 
be repeated with each partition being rebooted from the 
same modified firmware image. 

Therefore, a need exists for a logically partitioned 
system, method, and product for maintaining multiple, 
different firmware images, and booting only one of the 
partitions using one of these firmware images, wherein 
there is no need to reboot the entire system. 
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SUMMARY OF THE INVENTION 



A method, system, and product within a logically 
partitioned computer system including multiple, different 
partitions are disclosed for booting a partition using 
one of multiple, different firmware images. These 
multiple, different firmware images are stored in the 
computer system. One of the partitions is rebooted 
utilizing one of the firmware images without rebooting 
other ones of the partitions. 

The above as well as additional objectives, 
features, and advantages of the present invention will 
become apparent in the following detailed written 
description. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The novel features believed characteristic of the 
invention are set forth in the appended claims. The 
invention itself, however, as well as a preferred mode of 
use, further objectives and advantages thereof, will best 
be understood by reference to the following detailed 
description of an illustrative embodiment when read in 
conjunction with the accompanying drawings, wherein: 

Figure 1 is a pictorial representation which depicts 
a data processing system in which the present invention 
may be implemented in accordance with a preferred 
embodiment of the present inventions- 
Figure 2 is a more detailed block diagram of a data 
processing system in which the present invention may be 
implemented in accordance with the present inventions- 
Figure 3 is a block diagram of an exemplary 
logically partitioned platform in which the present 
invention may be implemented; 

Figure 4 illustrates a high level flow chart which 
depicts booting one partition using one of a plurality of 
different firmware images maintained by a logically 
partitioned computer system without the need for 
rebooting the entire system in accordance with the 
present invention; and 

Figure 5 depicts a high level flow chart which 
illustrates selecting one of a plurality of different 
firmware images to use to boot one of multiple, different 
partitions in a logically partitioned computer system in 
accordance with the present invention. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

A preferred embodiment of the present invention and 
its advantages are better understood by referring to the 
5 figures, like numerals being used for like and 
corresponding parts of the accompanying figures. 

The present invention is a method, system, and 
product for maintaining a plurality of different firmware 
images, and for rebooting one of a plurality of different 
10 partitions using one of these images without rebooting 
other ones of the partitions. These multiple, different 
firmware images are stored in non-volatile memory in a 
logically partitioned computer system. 

Each partition is associated with its own, unique 
15 partition table. In addition to other informatio'n stored 
in a partition table, an indicator within the partition 
table is used to indicate whether the partition 
associated with the table needs to be rebooted. Also 
stored within a partition table is an identifier which 
20 identifies one of the different firmware images. 

When the indicator indicates that the partition 
associated with the partition table having the indicator 
needs to be rebooted, the computer system will copy the 
firmware image identified by the identifier stored in 
25 that partition table to the associated partition. This 
firmware image is then executed in order to boot only 
that partition. Other partitions are unaffected by the 
copying of the firmware image and the rebooting of the 
partition . 

30 Figure 1 depicts a pictorial representation of a 

network of data processing systems in which the present 
invention may be implemented. Network data processing 
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system 10 is a network of computers in which the present 
invention may be implemented. Network data processing 
system 10 contains a network 12, which is the medium used 
to provide communications links between various devices 
5 and computers connected together within network data 
processing system 10. Network 12 may include 
connections, such as wire, wireless communication links, 
or fiber optic cables. 

In the depicted example, a server 14 is connected to 
p 10 network 12 along with storage unit 16. In addition, 
^ clients 18, 20, and 22 also are connected to network 12. 

pj Network 12 may include permanent connections, such as 

wire or fiber optic cables, or temporary connections made 
yj through telephone connections. The communications 

15 network 12 also can include other public and/or private 
O wide area networks, local area networks, wireless 

S networks, data communication networks or connections, 

tfl intranets, routers, satellite links, microwave links, 

2 cellular or telephone networks, radio links, fiber optic 

20 transmission lines, ISDN lines, Tl lines, DSL, etc. In 

some embodiments, a user device may be connected directly 
to a server 14 without departing from the scope of the 
present invention. Moreover, as used herein, 
communications include those enabled by wired or wireless 
25 technology. 

Clients 18, 20, and 22 may be, for example, personal 
computers, portable computers, mobile or fixed user 
stations, workstations, network terminals or servers, 
cellular telephones, kiosks, dumb terminals, personal 
30 digital assistants, two-way pagers, smart phones, 
information appliances, or network computers. For 
purposes of this application, a network computer is any 
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computer, coupled to a network, which receives a program 
or other application from another computer coupled to the 
network. 

In the depicted example, server 14 provides data, 
5 such as boot files, operating system images, and 

applications to clients 18-22. Clients 18, 20, and 22 
are clients to server 14. Network data processing system 
10 may include additional servers, clients, and other 
devices not shown. In the depicted example, network data 

10 processing system 10 is the Internet with network 12 
representing a worldwide collection of networks and 
gateways that use the TCP/IP suite of protocols to 
communicate with one another. At the heart of the 
Internet is a backbone of high-speed data communication 

15 lines between major nodes or host computers, consisting 
of thousands of commercial, government, educational and 
other computer systems that route data and messages. Of 
course, network data processing system 10 also may be 
implemented as a number of different types of networks, 

20 such as for example, an intranet, a local area network 
(LAN) , or a wide area network (WAN) . Figure 1 is 
intended as an example, and not as an architectural 
limitation for the present invention. 

Figure 2 is a more detailed block diagram of a data 

25 processing system in which the present invention may be 
implemented. Data processing system 100 may be a 
symmetric multiprocessor (SMP) system including a 
plurality of processors 101, 102, 103, and 104 connected 
to system bus 106. For example, data processing system 

30 100 may be an IBM RS/6000, a product of International 
Business Machines Corporation in Armonk, New York, 
implemented as a server within a network. Alternatively, 
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a single processor system may be employed. Also 
connected to system bus 106 is memory controller/cache 
108, which provides an interface to a plurality of local 
memories 160-163. I/O bus bridge 110 is connected to 
5 system bus 106 and provides an interface to I/O bus 112. 
Memory controller/cache 108 and I/O bus bridge 110 may be 
integrated as depicted. 

Data processing system 100 is a logically 
partitioned data processing system. Thus, data 

10 processing system 100 may have multiple heterogeneous 
operating systems (or multiple instances of a single 
operating system) running simultaneously. Each of these 
multiple operating systems may have any number of 
software programs executing within it. Data processing 

15 system 100 is logically partitioned such that different 
I/O adapters 120-121, 128-129, 136, and 148-149 may be 
assigned to different logical partitions. 

Thus, for example, suppose data processing system 
100 is divided into three logical partitions, PI, P2, and 

20 P3. Each of I/O adapters 120-121, 128-129, 136, and 

148-149, each of processors 101-104, and each of local 
memories 160-163 is assigned to one of the three 
partitions. For example, processor 101, memory 160, and 
I/O adapters 120, 128, and 129 may be assigned to logical 

25 partition PI; processors 102-103, memory 161, and I/O 

adapters 121 and 136 may be assigned to partition P2; and 
processor 104, memories 162-163, and I/O adapters 148-149 
may be assigned to logical partition P3 . 

Each operating system executing within data 

30 processing system 100 is assigned to a different logical 
partition. Thus, each operating system executing within 
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data processing system 100 may access only those I/O 
units that are within its logical partition. 

Peripheral component interconnect (PCI) Host bridge 
114 connected to I/O bus 112 provides an interface to PCI 
local bus 115. A number of Input/Output adapters 120-121 
may be connected to PCI bus 115. Typical PCI bus 
implementations will support between four and eight I/O 
adapters (i.e. expansion slots for add-in connectors). 
Each I/O Adapter 120-121 provides an interface between 
data processing system 100 and input/output devices such 
as, for example, other network computers, which are 
clients to data processing system 100. 

An additional PCI host bridge 122 provides an 
interface for an additional PCI bus 123. PCI bus 123 is 
connected to a plurality of PCI I/O adapters 128-129 by a 
PCI bus 126-127. Thus, additional I/O devices, such as, 
for example, modems or network adapters may be supported 
through each of PCI I/O adapters 128-129. In this 
manner, data processing system 100 allows connections to 
multiple network computers. 

A memory mapped graphics adapter 148 may be 
connected to I/O bus 112 through PCI Host Bridge 140 and 
EADS 142 (PCI-PCI bridge) via PCI buses 144 and 145 as 
depicted. Also, a hard disk 150 may also be connected to 
I/O bus 112 through PCI Host Bridge 140 and EADS 142 via 
PCI buses 141 and 145 as depicted. 

A PCI host bridge 130 provides an interface for a 
PCI bus 131 to connect to I/O bus 112. PCI bus 131 
connects PCI host bridge 130 to the service processor 
mailbox interface and ISA bus access pass-through logic 
194 and EADS 132. The ISA bus access pass-through logic 
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194 forwards PCI accesses destined to the PCI/ISA bridge 
193. The NV-RAM storage is connected to the ISA bus 196. 
The Service processor 135 is coupled to the service 
processor mailbox interface 194 through its local PCI bus 
195, Service processor 135 is also connected to 
processors 101-104 via a plurality of JTAG/I^C buses 134. 
JTAG/I^C buses 134 are a combination of JTAG/scan busses 
(see IEEE 1149.1) and Phillips I^C busses. However, 
alternatively, JTAG/I^C buses 134 may be replaced by only 
Phillips I^C busses or only JTAG/scan busses. All 
SP-ATTN signals of the host processors 101, 102, 103, and 
104 are connected together to an interrupt input signal 
of the service processor. The service processor 135 has 
its own local memory 191, and has access to the hardware 
op"panel 190. 

When data processing system 100 is initially powered 
up, service processor 135 uses the JTAG/scan buses 134 to 
interrogate the system (Host) processors 101-104, memory 
controller 108, and I/O bridge 110. At completion of 
this step, service processor 135 has an inventory and 
topology understanding of data processing system 100. 
Service processor 135 also executes Built-In-Self-Tests 
(BISTs), Basic Assurance Tests (BATs) , and memory tests 
on all elements found by interrogating the system 
processors 101-104, memory controller 108, and I/O bridge 
110. Any error information for failures detected during 
the BISTs, BATs, and memory tests are gathered and 
reported by service processor 135. 

If a meaningful/valid configuration of system 
resources is still possible after taking out the elements 
found to be faulty during the BISTs, BATs, and memory 
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tests, then data processing system 100 is allowed to 
proceed to load executable code into local (Host) 
memories 160-163. Service processor 135 then releases 
the Host processors 101-104 for execution of the code 
loaded into Host memory 160-163. While the Host 
processors 101-104 are executing code from respective 
operating systems within the data processing system 100, 
service processor 135 enters a mode of monitoring and 
reporting errors. The type of items monitored by service 
processor include, for example, the cooling fan speed and 
operation, thermal sensors, power supply regulators, and 
recoverable and non-recoverable errors reported by 
processors 101-104, memories 160-163, and bus-bridge 
controller 110. 

Service processor 135 is responsible for saving and 
reporting error information related to all the monitored 
items in data processing system 100. Service processor 
135 also takes action based on the type of errors and 
defined thresholds. For example, service processor 135 
may take note of excessive recoverable errors on a 
processor's cache memory and decide that this is 
predictive of a hard failure. Based on this 
determination, service processor 135 may mark that 
resource for reconfiguration during the current running 
session and future Initial Program Loads (IPLs) . IPLs 
are also sometimes referred to as a ''boot" or 
"bootstrap''. 

Those of ordinary skill in the art will appreciate 
that the hardware depicted in Figure 2 may vary. For 
example, other peripheral devices, such as optical disk 
drives and the like, also may be used in addition to or 
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in place of the hardware depicted. The depicted example 
is not meant to imply architectural limitations with 
respect to the present invention. 

Figure 3 is a block diagram of an exemplary 
5 logically partitioned platform in which the present 
invention may be implemented. Logically partitioned 
platform 200 includes partitioned hardware 230, partition 
management firmware, also called a hypervisor 210, and 
partitions 201-204. Operating systems 201a-204a exist 

10 within partitions 201-204. Operating systems 201a-204a 
may be multiple copies of a single operating system or 
multiple heterogeneous operating systems simultaneously 
run on platform 200. 

Partitioned hardware 230 includes a plurality of 

15 processors 232-238, a plurality of system memory units 
240-246, a plurality of input/output (I/O) adapters 
248-262, and a storage unit 270, Each of the processors 
242-248, memory units 240-246, NV-RAM storage 298, and 
I/O adapters 248-262 may be assigned to one of multiple 

20 partitions 201-204. 

Partitioned hardware 230 also includes service 
processor 290. A non-volatile memory device 291, such as 
a DRAM device, is included within service processor 291. 
The partition tables and firmware images described 

25 herein, as well as other information, are stored within 
service processor memory 291. 

Partition management firmware (hypervisor) 210 
performs a number of functions and services for 
partitions 201-204 to create and enforce the partitioning 

30 of logically partitioned platform 200. Hypervisor 210 is 
a firmware implemented virtual machine identical to the 
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underlying hardware. Firmware is ''software" stored in a 
memory chip that holds its content without electrical 
power, such as, for example, read-only memory (ROM), 
programmable ROM (PROM), erasable programmable ROM 
5 (EPROM) , electrically erasable programmable ROM (EEPROM) , 
and non-volatile random access memory (non-volatile RAM) . 
Thus, hypervisor 210 allows the simultaneous execution of 
independent OS images 201a-204a by virtualizing all the 
hardware resources of logically partitioned platform 200. 

10 Hypervisor 210 may attach I/O devices through I/O 
adapters 248-262 to single virtual machines in an 
exclusive mode for use by one of OS images 201a-204a- 

A hardware system configuration (HSC) machine 299 
may be coupled to data processing system 100 which 

15 includes logically partitioned platform 200. HSC 299 is 
a separate computer system that is coupled to service 
processor 290 and may be used by a user to control 
various functions of data processing system 100 through 
service processor 290. HSC 299 includes a graphical user 

20 interface (GUI) which may be used by a user to select a 
partition to be rebooted. Further, a listing of 
different firmware images that are stored within service 
processor memory 291 may be presented to the user 
utilizing the graphical user interface of HSC 299. The 

25 user may then select one of the listed firmware images to 
use to boot the selected partition as described below. 

When a user selects a partition, HSC 299 transmits a 
request to service processor 290 to have service 
processor 290 update the partition table associated with 

30 the selected partition. Service processor 290 updates 
the partition table by setting an indicator within the 



15 

Docket No. AUS920010565US1 

table to indicate that the associated partition needs to 
be rebooted. In addition, HSC 299 transmits an 
identifier to service processor 290 which identifies the 
particular firmware image selected by the user. Service 
5 processor 290 then stores this identifier within the 
partition table associated with the selected partition. 

As described in more detail below, hypervisor 210 
routinely checks each partition table to determine a 
current state of the indicator stored in each table. 

10 When hypervisor 210 finds an indicator that indicates a 

partition needs to be rebooted, hypervisor 210 copies the 
firmware image identified within that partition table to 
the logical memory of the partition associated with the 
partition table. That firmware image is then executed 

15 within the partition causing only that partition to be 
rebooted. Other partitions are unaffected by this 
process . 

Figure 4 illustrates a high level flow chart which 
depicts booting one partition using one of a plurality of 

20 different firmware images maintained by a logically 
partitioned computer system without the need for 
rebooting the entire system in accordance with the 
present invention. The process starts as depicted by 
block 400 and thereafter passes to block 402 which 

25 illustrates the system being powered-on. Next, block 404 
depicts service processor 290 finding a firmware image in 
the service processor's memory 291 to use when first 
powering-up the entire computer system. 

Block 406 then illustrates service processor 290 

30 copying the firmware image from the service processor's 
memory 291 to a memory device, such as memory 240-246. 
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The process then passes to block 408 which depicts 
service processor 290 sending control to the firmware 
copied into memory 240-246. Next, block 410 illustrates 
the firmware in memory 240-246 copying itself into 
5 hypervisor 210. 

Thereafter, block 412 depicts firmware in memory 
240-246 sending control to hypervisor 210, Next, block 
414 illustrates hypervisor 210 checking a partition table 
for a first partition. The process then passes to block 

10 416 which depicts a determination of whether or not the 
partition table indicates that the partition associated 
with the partition table needs to be rebooted. If a 
determination is made that the partition associated with 
the partition table does not need to be rebooted, the 

15 process passes to block 420 which illustrates hypervisor 
210 checking a partition table associated with a next 
partition. The process then passes back to block 416. 

Referring again to block 416, if a determination is 
made that the partition associated with the partition 

20 table does need to be rebooted, the process passes to 
block 422 which illustrates hypervisor 210 retrieving 
from the partition table an identification of one of 
multiple, different firmware images to use. Next, block 
424 depicts hypervisor 210 requesting the firmware image 

25 identified by the identification retrieved from the 
partition table. 

The process then passes to block 426 which 
illustrates hypervisor 210 receiving the requested 
firmware image. Next, block 428 depicts hypervisor 210 

30 copying the requested firmware image to the particular 
partition's logical memory. Thereafter, block 430 
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illustrates executing the firmware image copied into the 
partition. In this manner, only the particular partition 
is rebooted. The process then passes to block 420. 
Figure 5 depicts a high level flow chart which 
5 illustrates selecting one of a plurality of different 

firmware images to use to boot one of multiple, different 
partitions in a logically partitioned computer system in 
accordance with the present invention. The process 
starts as depicted by block 500 and thereafter passes to 

10 block 502 which illustrates permitting a user to request 
a reboot of a particular partition using the hardware 
system configuration (HSC) machine 299. Next, block 504 
depicts permitting the user, who is using the HSC machine 
299, to select one of multiple, different firmware images 

15 to use to boot the selected partition. The image is 

identified by a firmware image identifier, which is then 
included in the request. 

The process then passes to block 506 which 
illustrates HSC 299 transmitting the request made by the 

20 user to service processor 290. The request identifies a 
particular partition and includes a firmware image 
identifier. Next, block 508 depicts service processor 
290 selecting the partition table that is associated with 
the partition identified by the request. Thereafter, 

25 block 510 illustrates service processor 290 updating the 
selected partition table to indicate that the partition 
associated with the table is to be rebooted. Block 512, 
then, depicts service processor 290 storing the firmware 
image identifier in the selected partition table. The 

30 process then terminates as illustrated by block 514. 
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It is important to note that while the present 
invention has been described in the context of a fully 
functioning data processing system, those of ordinary 
skill in the art will appreciate that the processes of 
5 the present invention are capable of being distributed in 
the form of a computer readable medium of instructions 
and a variety of forms and that the present invention 
applies equally regardless of the particular type of 
signal bearing media actually used to carry out the 
Q 10 distribution. Examples of computer readable media 
m include recordable-type media, such as a floppy disk, a 

fij hard disk drive, a RAM, CD-ROMs, DVD-ROMs, and 

Hi transmission-type media, such as digital and analog 

01 communications links, wired or wireless communications 

15 links using transmission forms, such as, for example, 
1:3 radio frequency and light wave transmissions. The 

W computer readable media may take the form of coded 

^ formats that are decoded for actual use in a particular 

data processing system. 
20 The description of the present invention has been 

presented for purposes of illustration and description, 
and is not intended to be exhaustive or limited to the 
invention in the form disclosed. Many modifications and 
variations will be apparent to those of ordinary skill in 
25 the art. The embodiment was chosen and described in 
order to best explain the principles of the invention, 
the practical application, and to enable others of 
ordinary skill in the art to understand the invention for 
various embodiments with various modifications as are 
30 suited to the particular use contemplated. 



